Defara Dhanya, Jakarta – Indonesia's Ministry of Communication and Digital (Komdigi) is drafting a new rule that will require mobile phone users to verify their identity through facial recognition.
The policy, laid out in the Draft Regulation on the Registration of Telecommunication Service Customers Through Mobile Networks (RPM Customer Registration), is part of the ministry's 2025 work program and aims to plug long-standing gaps in SIM card registration security.Why the new regulation is needed
Under current rules, SIM card registration relies on two pieces of data: the national ID number (NIK) and the Family Card number (KK), as mandated by a 2021 ministerial regulation. In practice, these identifiers are widely misused.
Criminals often register phone numbers with other people's data to run scams, distribute online gambling ads, send spam SMS, or spread misinformation.
Although the existing regulation already instructs telecom operators to apply Know Your Customer (KYC) procedures, including facial biometric checks, technical standards for biometric use were never formalized. The result is a regulatory vacuum the ministry now seeks to fill.
"There is a need for a ministerial regulation that sets the technical provisions for using biometric population data for face recognition to strengthen customer identity verification and enhance national digital security," Komdigi said in a statement on November 17.
What the draft regulation introduces
The proposed regulation outlines new requirements for both Indonesian and foreign users, with a particular focus on facial recognition:
For Indonesian customers: Registration will require the phone number (MSISDN), NIK, and facial recognition data.
For customers under 17 and unmarried: Operators must use the child's MSISDN and NIK, supported by the NIK and facial biometrics of the family head.
For eSIM users: Facial recognition will also be mandatory, alongside NIK and the MSISDN.
The draft also covers broader issues, including data security, rules for pre-paid and post-paid services, number protection, supervision mechanisms, and transitional arrangements.
Transition period before full enforcement
Komdigi plans a phased rollout. For one year after the regulation takes effect, users may still register with NIK and KK, while facial recognition will be optional. This transitional period is designed to give operators time to adjust and allow public outreach.
After the first year, however, new registrations must use NIK and facial biometrics.
Importantly, the new requirement applies only to new customers. Existing users who registered with NIK and KK do not need to re-register, though they may update their data voluntarily.
Komdigi is inviting feedback from stakeholders and the public on the draft regulation until November 26, 2025. The ministry says the reform is crucial to strengthening digital security as mobile services become increasingly central to daily life.